CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

NVD•added 2019/04/04 4:29 p.m.•25 views

CVE-2019-1003087

A missing permission check in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpldoTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...

6.5CVSS6.3AI score0.01536EPSS

Exploits0References3

CVE•added 2019/04/04 3:38 p.m.•64 views

CVE-2019-1003087

CVE-2019-1003087 affects Jenkins Chef Sinatra Plugin. A missing permission check in ChefBuilderConfiguration.DescriptorImpl#doTestConnection form validation allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server. Affected component: Jenkins Chef Sin...

6.5CVSS6.2AI score0.01536EPSS

Exploits0References3Affected Software1